This Android loophole could have let your apps spy on your web browsing
Edgar Cervantes / Android Authority
TL;DR New research suggests that Meta and Yandex used a loophole in Android to link web browsing data to app identities.
The method bypassed incognito mode, cookie clearing, and other privacy protections.
Researchers say the only sure fix for now is uninstalling the affected apps.
You've long been reassured that using incognito mode or clearing cookies on your Android device will help prevent advertisers from tracking your web activity. However, new research shows that this may not be true, especially if you have certain popular apps installed.
As reported by Ars Technica and disclosed by researchers behind the Local Mess project, both Meta and Russian tech giant Yandex have been found to be using methods that allow web browsing to be linked with app identities on Android. The researchers found that this tracking method exploits the way Android allows browsers and apps to communicate on the same device.
The tracking scripts involved in this controversy are Meta Pixel and Yandex Metrica, which are embedded in millions of websites. While these tools are meant to help site owners measure engagement, the research shows they were being used to pass hidden messages from a browser to apps like Facebook, Instagram, and Yandex Maps using local network connections on your phone. If you were logged into any of those apps, they could pick up a unique ID from your browsing session and link it to your account, even in incognito mode.
Meta began using this technique in late 2024, but Yandex has reportedly been doing so since 2017.
That's a big problem because it circumvents most common privacy protections. It doesn't matter if you clear your cookies, avoid logging into sites, or browse in private mode. As long as the relevant app is installed and quietly running in the background, the company can still learn what websites you're visiting.
The loophole works by sending browser data to localhost — an internal part of your phone's network setup that apps can access. Android doesn't notify users or prompt for permission when this happens.When a website with Meta Pixel or Yandex Metrica loads, it can trigger a connection to those apps via localhost, quietly sending data along the way.
Meta began using this technique in late 2024, but Yandex has reportedly been doing so since 2017. Meta told Ars Technica that it had paused the feature and says it's working with Google to resolve what it describes as a 'potential miscommunication' over how the policies should apply. Google stated that the tracking behavior violates Play Store policies and Android users' privacy expectations, while Yandex hadn't yet responded to the publication's request for comment.
Browsers like Brave and DuckDuckGo already blocked some of this behavior, and Google has started rolling out updates to Chrome that shut down the specific methods used. But the researchers caution that these fixes are temporary. A few tweaks to the code could get around them, unless Android adds more fundamental restrictions on how apps can access local ports.
Meta Pixel and Yandex Metrica are widespread, appearing on almost six million and three million websites, respectively. According to the study, the vast majority of sites with these trackers begin collecting this data as soon as you land on the page, often before any consent pop-up appears.
If all this sounds invasive, that's because most people would agree that it is. According to the research team, the only surefire way to block this kind of Android tracking right now is to uninstall the affected apps entirely.
Got a tip? Talk to us! Email our staff at
Email our staff at news@androidauthority.com . You can stay anonymous or get credit for the info, it's your choice.
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Forbes
an hour ago
- Forbes
Samsung Confirms Upgrade Choice—Galaxy Users Must Now Decide
This decision defines the future of your phone. Republished on June 7 with reports into Google's new decision for Android users. A timely warning from Samsung this week, which neatly sets out the biggest upgrade decision now facing Android users. As whispers start to spread suggesting a disconnect between Samsung and Google at the heart of Android, this is critical. We're talking AI and the new features and offerings now hitting phones and PCs at breakneck speed. This is where Galaxy has an advantage, Samsung says, 'in privacy-first, AI-powered experiences' which can 'protect you in the era of AI.' The question the Galaxy-maker asks in its latest post is the right one: 'This level of personalization' brought by AI 'can be incredibly helpful, but the more your phone knows, the more there is to protect. So, what's keeping all that personal data secure?' Samsung's answer is Knox. 'Every Galaxy device is protected from the chip up by a multi-layered approach, which includes on-device personalization, user-controlled cloud processing, and ecosystem-wide protection through Samsung Knox Matrix.' This is Samsung's secure ecosystem that is the closest replica to Apple's securely walled garden currently available on Android. 'At the core of this system is Samsung Knox Vault, Samsung's hardware-based solution for your most sensitive information.' Knox is not new and neither is the concept of hardware-enabled Galaxy data security. What is new is segmenting sensitive the latest AI-related data from the rest, and securing that alongside the more traditional PINs, passwords and credit card numbers. 'Location service metadata from your most personal photos,' Samsung says, 'could easily give away the exact location where the image was taken.' And there's not much data more sensitive than who did what, where and when. 'In the era of AI, personal information like your home address, face clustering ID, person ID, pet type, scene type and more need to be encrypted and stored in a safe location. These things aren't just files — they are deeply connected to your daily life.' It's unclear exactly what is being or will be segmented and how this plays into the various opt-ins that Samsung has added to distinguish between on-device and cloud AI, between what is only within your secure enclave and what is outside. But it's difficult not to read this push as a play against the latest announcements from Google and the cloud-based AI that will now run riot across sensitive data, including emails and even cloud data storage. Yes, there are always opt-outs, but it's all or nothing for users who want AI but are not yet worrying about privacy. 'As Galaxy AI becomes more useful,' Samsung says, 'it also becomes more personal — learning how you use your device and adapting to your needs… Knox Vault is more than a security feature, it's Galaxy's promise that no matter how advanced your devices become, or how much AI evolves, your privacy is secured.' Google, meanwhile, will not make this decision easy for Samsung user. No one is rolling out new smartphone AI innovations faster, and it will always overshadow what can be done if users take a privacy-centric, device-only approach. Per Android Police, the latest update is 'Google's Gemini replacing Google Assistant as the default AI assistant, taking on all digital assistance responsibilities as Assistant is phased out later this year. Gemini is gaining 'Scheduled Actions,' allowing users to automate recurring tasks and information delivery at specific times.' This is the stepping stone to so-called Agenctic AI on phones, where monitoring data and events and activities enables an agent to make decisions autonomously on a smartphone owner's behalf. This next step, with 'Scheduled Actions streamlining routines [and] offering personalized updates,' is just the start. As Mashable says, 'When combined with computer vision, which is what allows a model to 'see' a user's screen, we get the agentic AI everyone is so excited about… Agentic AI tools could order groceries online, browse and buy the best-reviewed espresso machine for you, or even research and book vacations. In fact, Google is already taking steps in this direction with its new AI shopping experience.' Allowing AI access to smartphones with all the data and insight they contain, pushed this to a level even beyond Windows's controversial Recall. It's decision time.
Business Insider
3 hours ago
- Business Insider
How Meta Platforms' (META) Shrewd Energy Strategy Fortifies Future Earnings
Tech giant Meta Platforms (META) has entered into a 20-year power purchase agreement (PPA) with Constellation Energy's (CEG) Clinton nuclear plant in Illinois. The deal secures over 1 gigawatt of carbon-free electricity at approximately $80 per megawatt-hour (MWh), helping Meta manage long-term energy costs and mitigate exposure to an increasingly volatile electricity market. Confident Investing Starts Here: Easily unpack a company's performance with TipRanks' new KPI Data for smart investment decisions Receive undervalued, market resilient stocks right to your inbox with TipRanks' Smart Value Newsletter By locking in stable energy rates, Meta is not only insulating itself from future price swings but also ensuring a reliable power supply for its rapidly expanding data center infrastructure—critical to its AI-driven growth strategy. The recent news has put a strong bid into META stock, helping the company add almost 5% to the value of its shares over the past five days. This move reinforces Meta's position as a leading force in AI-powered social platforms and signals a strong, strategic commitment to sustainable and scalable energy solutions. Accordingly, I am reaffirming my bullish stance on META stock on the back of the CEG joint venture. Rising Power Demand Forces Meta Into Strategic Deal Meta's decision comes at a critical juncture, as U.S. power demand is rising significantly for the first time in decades, primarily driven by the explosive growth of data centers supporting AI, cloud computing, and automation. Utilities have already warned that electricity generation capacity may not scale quickly enough to meet this accelerating demand. PJM, the nation's largest grid operator, has projected potential capacity shortfalls as early as 2030, citing plant retirements outpacing new development. This growing supply-demand imbalance has already introduced volatility in energy markets. In 2022, wholesale power prices averaged roughly $80 per megawatt-hour (MWh) for the first time in over a decade, primarily due to surging natural gas prices that heavily influence market rates. While prices eased in 2023, the macro trends—especially from increasing compute intensity—suggest a renewed upward trajectory starting in 2025. For Meta, whose operations are becoming increasingly energy-intensive, this volatility carries real risk. The company's electricity usage jumped more than 30% last year, reaching approximately 15 terawatt-hours, exposing it to significant cost fluctuations. By securing a long-term nuclear PPA, Meta is effectively insulating itself from future price shocks—stabilizing its operating margins and providing greater long-term predictability for profitability. Meta's Nuclear Energy Strategy to Commence in 2027 Starting in 2027 and continuing through 2047, Meta will purchase the full output—1,121 megawatts—of electricity generated by Constellation's Clinton Power Station. As a 24/7/365 baseload source, nuclear energy plays a critical role in supporting intermittent renewables like solar and wind. Urvi Parekh, Meta's Head of Global Energy, underscored the strategic importance of the deal, stating that 'securing clean, reliable energy is necessary to continue advancing our AI ambitions.' While financial terms were not publicly disclosed, analysts estimate the agreement is priced near $80 per megawatt-hour. Meta secured advantageous terms by helping extend the life of an existing nuclear facility. The deal effectively replaces Illinois' expiring zero-carbon credit subsidies in 2027, allowing the Clinton reactor to remain operational without additional ratepayer support. In return, Meta locks in a long-term, carbon-free power supply—shielded from fuel price volatility and future grid constraints. Constellation's CEO praised the agreement as a forward-thinking private-sector model, highlighting Meta's recognition of the strategic value in maintaining the nation's nuclear infrastructure. Meta's decision to secure a stable, long-term energy supply offers a clear strategic advantage—particularly as Big Tech intensifies efforts to lock in reliable power sources to support rapidly expanding, energy-intensive AI workloads. Microsoft, for instance, has signed a 20-year power purchase agreement (PPA) tied to the planned restart of the Three Mile Island facility, reportedly at a mid-range but competitive price of approximately $110 per megawatt-hour. Meanwhile, Google is backing small modular reactor (SMR) technology through its investment in Kairos Power, aiming to integrate nuclear energy into its operations by 2030, alongside broader commitments to renewables. Amazon Web Services is also expanding into the nuclear space, supporting advanced reactor startup X-energy to potentially power future AWS data centers in high-demand regions, such as Virginia and the Pacific Northwest. What is the Price Target for Meta Platforms? On Wall Street, Meta stock has a consensus Strong Buy rating, based on 41 Buys, three Holds, and one Sell rating attained over the past three months. The average META stock price target is $697.55, indicating ~2% upside potential over the next 12 months. However, the high estimate is $918, and my own target is about $800. This means a potential 15% return over the next 12 months or nearly a 30% return if the high estimate is met. Meta Wins by Being Strategic on Energy Meta's nuclear power agreement delivers clear strategic advantages in terms of energy reliability and cost certainty. By effectively hedging against future energy price volatility, the company mitigates a key operational risk and reinforces its ability to maintain stable profit margins over time. This long-term visibility into energy costs not only enhances financial resilience but also ensures a secure energy supply to support the company's expanding AI infrastructure. Additionally, Meta's direct investment in carbon-free energy aligns with the values of environmentally conscious and ESG-focused investors, likely bolstering long-term sentiment around the stock. In essence, this move transforms a historically volatile cost center into a strategic asset—positioning Meta for decades of consistent energy management and sustained profitability amid an increasingly dynamic tech and power landscape.
Business Insider
3 hours ago
- Business Insider
CEG, OKLO, and SMR Get Set to Power the AI Boom via Nuclear Energy
The nuclear energy sector is experiencing a resurgence unseen in decades, driven largely by its potential to power the burgeoning AI revolution. Major technology companies such as Meta (META), Microsoft (MSFT), and Alphabet (GOOGL) are competing to secure reliable energy sources for their expanding data centers, and nuclear power's clean, consistent output has positioned it as a key player in this race. Confident Investing Starts Here: Leading this revival are three companies—Constellation Energy (CEG), Oklo (OKLO), and NuScale Power (SMR) —each bringing a distinct approach to the nuclear landscape. Over the past year, all three have outperformed the market, capturing investor attention amid rising energy demand. Constellation Energy (NASDAQ:CEG) | The Nuclear Titan Locking in Tech Giants Constellation Energy is the 800-pound gorilla of U.S. nuclear power, and it's just landed a deal that's got everyone's attention. Just two days ago, CEG signed a 20-year power purchase agreement with Meta to deliver 1.1 gigawatts from its Clinton Clean Energy Center in Illinois, starting in 2027. This isn't an ordinary contract, but rather a lifeline for a plant that was on the verge of closure when its zero-emissions credits expire. The deal, which also boosts Clinton's output by 30 megawatts, underscores CEG's ability to secure tech giants. Microsoft is already on board with a Three Mile Island restart. What makes CEG a one-of-a-kind destination for tech titans is its scale. With 94 reactors across the U.S., they're a one-stop shop for tech companies chasing net-zero goals while powering AI workloads. Their shift away from co-located data center plans to grid-connected projects, as noted in last month's update, indicates they're adapting to regulatory hurdles, such as FERC's rejection of expanded co-location deals. Moreover, the Meta deal demonstrates that CEG can pivot and still secure massive contracts. Sure, their stock's run-up makes it a bit daunting to be bullish on today, but with AI data centers projected to eat up 9% of U.S. electricity by 2030, CEG's infrastructure could be a cash cow in waiting. Is Constellation Energy Stock a Good Buy? Currently, most analysts are bullish on CEG stock. The stock features a Moderate Buy consensus rating based on eight Buy and five Hold ratings assigned in the past three months. No analyst rates the stock a sell. CEG's average stock price target of $319.45 implies ~10% upside over the next twelve months, despite shares having already rallied 30% year-to-date. Oklo (NYSE:OKLO) | The Startup with a Nuclear Vision Oklo, the newest entrant in the nuclear energy space and backed by OpenAI's Sam Altman, is focused on small modular reactors (SMRs)—compact, flexible power plants ideally suited for data centers. The company's stock has surged 440% over the past year, fueled by high-profile agreements such as its December deal with Switch to supply 12 gigawatts through 2044. Additionally, a recent memorandum with Korea Hydro & Nuclear Power to advance their 75-megawatt Aurora Powerhouse fast reactor has further accelerated momentum. While Oklo remains pre-revenue and is currently investing heavily in technology development, with commercial operations still several years away, its 'power-as-a-service' model—where the company builds, owns, and operates reactors—could revolutionize how data centers secure reliable power without significant upfront costs. Recent executive orders easing nuclear regulations have also provided a regulatory boost. However, significant risks remain, including ongoing R&D challenges and the high costs of scaling production. For investors who believe SMRs are key to powering the AI revolution, Oklo's long-term vision holds considerable promise. Is OKLO Stock a Good Buy? On Wall Street, Oklo stock carries a Moderate Buy consensus rating based on six Buy and three Hold ratings. No analyst rates the stock a sell. Oklo's average stock price target of $54.40 implies about 15% upside potential over the next twelve months. NuScale Power (NYSE:SMR) | The SMR Pioneer with a Head Start NuScale Power holds a distinct advantage as the first U.S. company to secure Nuclear Regulatory Commission (NRC) approval for its small modular reactor (SMR) design—the 77-megawatt VOYGR module. But the company isn't resting on this milestone; it is rapidly advancing a 2-gigawatt agreement with Standard Power to supply data centers in Pennsylvania and Ohio. Despite posting losses as it invests in expanding its supply chain, NuScale's Q1 report revealed an impressive 857% year-over-year revenue increase. The recent Meta-Constellation Energy deal also boosted NuScale's stock, signaling strong market confidence in its role in nuclear's resurgence. What distinguishes NuScale from its competitors is its pragmatic approach. Its light-water reactor technology is more established and less experimental than Oklo's fast reactors, making it a safer candidate for near-term deployment. However, supply chain constraints and complex project coordination remain significant challenges that could delay progress. Still, with tech giants like Google and Amazon entering SMR agreements, NuScale's first-mover advantage positions it well to meet growing energy demands. Its factory-built, modular design aligns perfectly with data centers' requirements for scalable, reliable power. Is NuScale Power a Good Stock to Buy? NuScale Power is currently covered by eight Wall Street analysts, who generally hold a bullish outlook. The stock carries a Moderate Buy consensus rating, reflecting five Buy ratings, two Holds, and one Sell over the past three months. However, SMR's average price target of $27.42 suggests approximately 12% downside potential over the next twelve months. Why Nuclear Energy Is the Smart Bet for AI's Future The resurgence of the nuclear sector is no coincidence, as the soaring energy demands of AI are reshaping the industry landscape. Constellation Energy (CEG) brings scale, Oklo (OKLO) leads with innovation, and NuScale Power (SMR) holds a regulatory advantage. Each faces its own challenges—CEG's stock trades at a premium valuation, Oklo is still managing significant cash burn, and NuScale navigates operational risks. Nevertheless, the potential upside is substantial. With tech giants committing to multi-gigawatt agreements and nuclear capacity projected to quadruple by 2050, these companies are at the forefront of a transformative energy revolution and merit close attention.
